Apple re-posts Mac OS X Server 10.6.5 update

Having pulled last Wednesday's Mac OS X Server 10.6.5 update, Apple has now re-posted an updated version, marked as v1.1 with an incremented build number (10H575), of its latest 10.6 Snow Leopard Server operating system update. The updated release fixes a number of issues found in the previous 10.6.5 server update, including a security vulnerability related to a built-in mail server.

According to the company's security advisory, the latest version of the update addresses a security issue in which "a user may receive mail intended for other users". The cause of the problem is said to be due to a memory aliasing issue in Dovecot's handling of user names – the open source Dovecot secure IMAP mail server is only included in the server version of Mac OS X. However, Apple notes that the issue "does not affect the Dovecot open source project".

More details about the update can be found on the About Mac OS X Server v10.6.5 Update page and in the security advisory. All users are advised to upgrade to the latest release via the built-in Software Update function as soon as possible. The 10.6.5 v1.1 server standard update is 858.02 MB in size, while the combo update is 1.12 GB.

See also:

• About the security content of Mac OS X Server v10.6.5 (10H575), security advisory from Apple.
• PGP warns of Mac OS X 10.6.5 update, a report from The H.
• Apple releases Mac OS X 10.6.5 update, a report from The H.

(crve)